girleroom.pdb
Static task
static1
Behavioral task
behavioral1
Sample
04b3e3bd64200f37f65e6b2a58f74d00_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04b3e3bd64200f37f65e6b2a58f74d00_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
04b3e3bd64200f37f65e6b2a58f74d00_JaffaCakes118
-
Size
332KB
-
MD5
04b3e3bd64200f37f65e6b2a58f74d00
-
SHA1
b302a9eb966d99946f874f3b663582e03c4d4257
-
SHA256
b6132c5f5e1ea4f37e2b2fd0a4faf1eacea4a5bc1e59be0452dffe27739f4b03
-
SHA512
8ca5469903cfbe2f9994785afb59147cc0f3a625c337634c99e535d6e6415e22171e3c3febfc012f6b0a59c2c91de5c817988c8ec264bd1118920a04c62fa956
-
SSDEEP
3072:LypsVMVFc7IE7xtWr9u4KOiWbTbbBw0JqVxPS7WyM+i5fZ/J+pRJB8s:LQsbXWr9u3m3dYxPN5h/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b3e3bd64200f37f65e6b2a58f74d00_JaffaCakes118
Files
-
04b3e3bd64200f37f65e6b2a58f74d00_JaffaCakes118.dll windows:4 windows x86 arch:x86
4973a1c7a1ebb430e48d3892a7c59e37
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
SetDlgItemInt
ScreenToClient
kernel32
GetFileInformationByHandle
GlobalFree
GlobalAlloc
GetSystemDefaultLCID
GetSystemDefaultLCID
BeginUpdateResourceW
GetProcessShutdownParameters
GetNumberFormatW
OpenWaitableTimerW
SetUnhandledExceptionFilter
WriteConsoleA
GetProfileStringA
CreateConsoleScreenBuffer
GetHandleInformation
GetSystemInfo
GlobalGetAtomNameA
SetFileApisToANSI
QueueUserWorkItem
DisconnectNamedPipe
GetNamedPipeInfo
SetCalendarInfoW
ReplaceFileA
WriteProfileSectionW
IsBadStringPtrW
GetModuleHandleA
Exports
Exports
QueryParameter
QueryParameterScript
QueryPowerPoint
QueryProgram
QueryProgramming
QueryTutorial
Sections
.text Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ